diff options
| author | Craig Jennings <c@cjennings.net> | 2026-05-23 19:51:51 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-05-23 19:51:51 -0500 |
| commit | f4bba31ccdb0b787baf42583eade557e5ecf1be7 (patch) | |
| tree | 0dc5c0984660e1b222a42f5c421ee41c0d01d7d0 /scripts | |
| parent | 4541d1d50cc96218156dc540a25c10b2abaff47f (diff) | |
| download | dotemacs-f4bba31ccdb0b787baf42583eade557e5ecf1be7.tar.gz dotemacs-f4bba31ccdb0b787baf42583eade557e5ecf1be7.zip | |
fix(org-babel): confirm babel evaluation by default, toggle on a key
org-babel-config set org-confirm-babel-evaluate to nil globally, so a source block in any Org file (a cloned repo, a downloaded note, a web clip) ran with no prompt. That's arbitrary code execution on opening the wrong file and hitting C-c C-c.
I set the default to t (confirm) and replaced the old babel-confirm command, which only toggled under a prefix arg, with cj/org-babel-toggle-confirm. It flips confirmation off for the session when I'm in trusted files and back on when I'm done, bound to C-; k.
The C-; k binding is a placeholder. I filed a follow-up to give it a permanent Org-prefixed home.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions
